Principal Architect, Network Security & Zero Trust (Banking)

We are seeking a Senior Architect - External Networks to define the strategic architecture vision for enterprise perimeter security, modern DMZ environments, cloud connectivity, and Zero Trust initiatives. This role will drive architecture standards, target-state designs, and technology roadmaps while influencing cross-functional teams across cybersecurity, infrastructure, cloud, and application development.

Client Details

Our client is one of the world's leading financial institutions, serving millions of consumers, businesses, and institutional clients globally. The organization is committed to innovation, responsible growth, technology modernization, and maintaining industry-leading standards in security, resiliency, and client experience.

Description

Define and maintain enterprise architecture strategies for perimeter security, external connectivity, cloud ingress and egress, and modern DMZ environments.

Lead the design of secure, resilient, scalable, and observable architectures supporting internet-facing applications, APIs, partner ecosystems, and third-party connectivity.

Advance Zero Trust capabilities, including identity-aware access, least privilege, segmentation, and micro-segmentation.

Develop architecture roadmaps, reference architectures, reusable design patterns, and technology standards.

Evaluate solution designs, document architectural decisions, assess risks, and recommend mitigation strategies.

Partner with engineering, cybersecurity, cloud, infrastructure, product, and risk teams to align architecture with business objectives.

Mentor architects and engineers while promoting architectural consistency and technical excellence.

Assess emerging technologies and provide strategic recommendations for adoption, modernization, or retirement.

Profile

Location: Midtown Manhattan, NY or Jersey City, NJ

Work Arrangement: Hybrid

The ideal candidate will possess:

• 15+ years of experience in network engineering, network security, infrastructure architecture, or related disciplines.
• 10+ years designing enterprise-scale network and security architectures.
• Deep expertise in enterprise networking, network security architecture, perimeter security, and modern DMZ design.
• Proven experience leading large-scale Zero Trust transformation initiatives.
• Strong knowledge of cloud networking and security across AWS, Azure, and hybrid environments.
• Experience securing internet-facing applications, APIs, and third-party connectivity ecosystems.
• Demonstrated success influencing senior stakeholders and leading cross-functional architecture initiatives without direct authority.
• Excellent communication skills with the ability to translate technical concepts into business outcomes.
• Experience within financial services or another highly regulated industry is highly desirable.
• Preferred certifications include CISSP, CCIE, CCDE, TOGAF, SABSA, AWS Security Specialty, or Azure security and architecture certifications.

Job Offer

• Permanent opportunity
• Base salary of $175,000 - $205,000
• Opportunity to shape enterprise-wide security and connectivity strategy
• Exposure to large-scale cloud, cybersecurity, and network modernization initiatives
• Strong visibility with senior technology and business leadership
• Collaborative, innovation-driven environment with significant career growth potential
• Comprehensive benefits package, retirement programs, and wellness initiatives

If you're a strategic architecture leader passionate about Zero Trust, cloud security, and enterprise-scale network transformation, we'd love to hear from you.

MPI does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, marital status, or based on an individual's status in any group or class protected by applicable federal, state or local law. MPI encourages applications from minorities, women, the disabled, protected veterans and all other qualified applicants.